How can a Solutions Architect meet this requirement?

Correct Answer for the Question – How can a Solutions Architect meet this requirement? is given below

A company is launching a new static website on Amazon S3 and Amazon CloudFront. The company wants to ensure that all web requests go through only CloudFront.How can a Solutions Architect meet this requirement?To allow access to your Amazon S3 bucket only from a CloudFront distribution, first add an origin access identity (OAI) to your distribution. Then, review your bucket policy and Amazon S3 access control list (ACL) to be sure that:Only the OAI can access your bucket.CloudFront can access the bucket on behalf of requesters.Users can’t access the objects in other ways, such as by using Amazon S3 URLs.Reference: https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-access-to-amazon-s3/

Configure the S3 bucket policy to allow only CloudFront IP addresses to read objects.

Create IAM users in a group that has read access to the S3 bucket. Configure CloudFront to pass credentials to the S3 bucket.

Create a CloudFront origin access identity (OAI), then update the S3 bucket policy to allow the OAI read access.

Convert the S3 bucket to an EC2 instance, then give CloudFront access to the instance by using security groups.

Correct Answer

The Correct Answer for this Question is

Create a CloudFront origin access identity (OAI), then update the S3 bucket policy to allow the OAI read access.

Explanation

The Question – How can a Solutions Architect meet this requirement? has been answered correctly and answers for the question is Create a CloudFront origin access identity (OAI), then update the S3 bucket policy to allow the OAI read access.

More about these Exams

These Exam Questions and the order of these questions keep changing. but the answers are obviously same. so if you don’t find a question after another we suggest you search it in the search box and we are sure you’ll find it. you can bookmark this site for Quick access in future.

We hope you found it helpful don’t forget to leave a comment if you feel a need to correct or ask we’re always here to help.

you can find more here at mnccertified

Feel free to contact via comment or email.

Happy Learning

Cheers, Team MNCcertified

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *